AZ 204 Test Comprehensive Questions (Frequently Tested) with Verified Answers Graded A+

AZ 204 Test Comprehensive
Questions (Frequently Tested)
with Verified Answers Graded
A+
Which of the following Azure Functions hosting plans is best when predictive scaling and costs
are required?



Functions Premium Plan

Dedicated plan

Consumption plan - Answer: Dedicated plan



An organization wants to implement a serverless workflow to solve a business problem. One of
the requirements is the solution needs to use a designer-first (declarative) development model.
Which of the choices below meets the requirements?



Azure Functions

Azure Logic Apps

WebJobs - Answer: Azure Logic Apps



Which of the following is required for a function to run?



Binding

,Trigger

Both triggers and bindings - Answer: Trigger



Which of the following supports both the in and out direction settings?



Bindings

Trigger

Connection value - Answer: Bindings



What is an extension of Azure Functions that lets you write stateful functions in a serverless
compute environment? - Answer: Durable Functions



What are the four durable function types in Azure Runctions? - Answer: orchestrator, activity,
entity, client



You manage an Azure App Service web app named app1. App1 is registered as an application in
Azure Active Directory (Azure AD). You need to ensure that Azure AD signed-in user information
can be retrieved by app1 by using Microsoft Graph. What should you configure?



Select only one answer.

appRole

sapplication permissions

groupMembershipClaims

delegated permissions - Answer: delegated permissions



You have an Azure Storage account. You need to provide external users the ability to create and
update blobs. Which enum value of BlobSasPermissions should you use?

,Select only one answer.

Add

Create

Read

Write - Answer: Write



You manage an Azure App Service web app named app1. App1 is registered as a multi-tenant
application in an Azure Active Directory (Azure AD) tenant named tenant1.



You need to grant app1 the permission to access the Microsoft Graph API in tenant1.



Which service principal should you use?



Select only one answer.

legacy

system-assigned managed identity

application

user-assigned managed identity - Answer: application



You manage an Azure Active Directory registered application named app1. App1 calls a web API,
which then calls Microsoft Graph. You need to ensure the signed-in user identity is delegated
through the request chain. Which authentication flow should you use?



Select only one answer.



Authorization code

On-Behalf-Of

, Client credentials

Implicit - Answer: On-Behalf-Of



You develop a multitenant web application named App1. You plan to register App1 with
multiple Azure Active Directory (Azure AD) tenants.



You need to identify the relationship between the application objects and security principals
associated with App1.



Which relationship should you identify?



Select only one answer.

App1 will have multiple application objects and multiple service principals.

App1 will have multiple application objects and a single service principal.

App1 will have a single application object and multiple service principals.

App1 will have a single application object and a single service principal. - Answer: App1 will have
a single application object and multiple service principals.



You need to generate a shared access signature token that grants the Read permission to a blob
container.



Which code segment should you use?



Select only one answer.



BlobSasBuilder sasBuilder = new BlobSasBuilder() { BlobContainerName =
containerClient.Name, Resource = "b" };